Back to directory

WRITEUP #5288

1-Click Account Takeover in Virgool.io — a Nice Case Study

Auth BypassAccount takeoverOpen redirect

by@YShahinzadeh(Yashar Shahinzadeh)

Program

-

Published

Jun 27, 2019

Added to HackDex

Sep 15, 2022

Read Full Writeuphttps://medium.com/@y.shahinzadeh/1-click-account-takeover-in-virgool-io-a-nice-case-study-6bfc3cb98ef2

▸ RELATED WRITEUPS

Interesting Story of an Account Takeover Vulnerability

Auth BypassAccount takeover

Instagram and Meta 2FA Bypass by Unprotected Backup Code Retrieval in Accounts Center

Auth Bypass2FA / MFA bypass

Forced SSO Session Fixation

Account takeover on 8 years old public program

Auth BypassAccount takeover

$500 for Cracking Invitation Code For Unauthorized Access & Account Takeover

Auth BypassAccount takeover

Built with ❤️ by Shubham Rawat